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Nowadays, public wireless local area networks (WLANs), commonly called hotspots, are 
being largely deployed by WISPs (Wireless Internet Service Providers) as a means of 
offering ubiquitous Internet access to their customers. Although a substantial number ... 



Formal .specifjQMiO-O. 

^ Karsten Sohr, Michael Drouineaud, Gail-Joon Ahn 
March 2005 SAG '05: Proceedings of the 2005 AGM symposium on Applied computing 
Publisher: AGM 

Additional Information: fuil citation, abstract, references, cited Dy, index 



Full text available: "l^p.-rifCi 96 29 KB 



Bibliometrics: Downloads (6 Weeks): 16, Downloads (12 Months): 168, Citation Count: 1 
Many healthcare organizations have transited from their old and disparate business 
models based on ink and paper to a new, consolidated ones based on electronic patient 
records. There are significant demands on secure mechanisms for collaboration and ... 
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A long-standing problem in information security is how to specify and enforce expressive 
security policies that control information flow while also permitting information release 
(i.e., declassification) where appropriate. This paper presents security ... 

Keywords: declassification, downgrading, information flow, noninterference, security 
policies 
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The emphasis in database privacy should fall on a balance between confidentiality, 
integrity and availability of personal data, rather than on confidentiality alone. This 
balance should not necessarily be a trade-off, but should take into account the ... 
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Policy enforcement is an integral part of many applications. Policies are often used to 
control access to sensitive information. Current policy specification languages give users 
fine-grained control over when and how information can be accessed, and ... 
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IPsec is the standard suite of protocols for network-layer confidentiality and 
authentication of Internet traffic. The I Psec protocols, however, do not address the 
policies for how protected traffic should be handled at security end points. This article ... 
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We have identified five problems that inhibit effective enterprise security management - 
policy divide, lack of reproducibility, lack of consistency, lack of coverage and lack of 
flexibility in current management systems. We discuss these problems and ... 
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Edited by Peter G. Neumann (Risks Forum Moderator and Chairman of the ACM 
Committee on Computers and Public Policy), plus personal contributions by others, as 
indicated. Opinions expressed are individual rather than organizational, and all of the 
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Around the world as both crime and technology become more prevalent, officials find 
themselves relying more and more on video surveillance as a cure-all in the name of 
public safety. Used properly, video cameras help expose wrongdoing but typically 
come ... 
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We examine the tradeoff between privacy and usability of statistical databases. We 
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model a statistical database by an n-bit string cl^,..,cln, with a query being a subset q £ 
[n] to be ... 
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In data publishing, the owner delegates the role of satisfying user queries to a third- 
party publisher. As the publisher may be untrusted or susceptible to attacks, it could 
produce incorrect query results. In this paper, we introduce a scheme for users ... 
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Current day database applications, with large numbers of users, require fine-grained 
access control mechanisms, at the level of individual tuples, not just entire 
relations/views, to control which parts of the data can be accessed by each user. Fine- 
grained ... 
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Malicious traffic from self-propagating worms and denial-of-service attacks constantly 
threatens the everyday operation of Internet systems. Defending networks from these 
threats demands appropriate tools to conduct comprehensive vulnerability 
assessments ... 
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This paper introduces a methodology for estimating interdomain Web traffic lows 
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A "blocker" tag is a privacy-enhancing radio-frequency identification (RFID) tag. It 
operates by interfering with the protocol in which a reader communicates individually 
with other RFID tags. While inexpensive to manufacture in quantity, blockers are ... 
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For autonomous agents to achieve their full potential they require access to detailed 
private information. The time is rapidly approaching when we can build systems to 
gather this information and monitor all aspects of an individual's life. In this paper ... 
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Our dependence on web applications has steadily increased, and we continue to 
integrate them into our everyday routine activities. When we are making reservations, 
paying bills, and shopping on-line, we expect these web applications to be secure and ... 
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We consider the problem of specifying and verifying cryptographic security protocols for 
XML web services. The security specification WS-Security describes a range of XML 
security tokens, such as username tokens, public-key certificates, and digital ... 
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Finding patterns in large, real, spatio/temporal data continues to attract high interest 
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networks collecting operational data from automobiles, or even from humans with ... 
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